You are a system administrator for a pool of Web servers. The vendor who sells your Web server posts a patch and sample exploit for a newly discovered vulnerability. You will take all of the actions listed below. Which of the following actions should you take first?

A.
Run the sample exploit against a test server.

B.
Run the sample exploit against a production server.

C.
Apply the patch to all production servers.

D.
Test the patch on a production server.

E.
Test the patch on a non-production server.